This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft File: wGWeHdFAebUh2SsfUsvE_TI-GNM.mft (raw, json) Hash identifier: y1ZN2nDRoWkNL/u8xsS8EjkQG0VflLBvKEume+zlUMo= Subject key identifier: FB:D0:27:25:FC:0F:93:09:A4:B6:A5:68:1B:FC:F9:57:DA:5D:7E:F5 Authority key identifier: C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3 Certificate issuer: /CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3 Certificate serial: 019B514E4251EC75668CC629B1A062D6AC55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft Manifest number: 04A4 Signing time: Wed 24 Dec 2025 17:00:41 +0000 Manifest this update: Wed 24 Dec 2025 17:00:41 +0000 Manifest next update: Thu 25 Dec 2025 17:00:41 +0000 Files and hashes: 1: XmdSMCmint9DPZ--cCLmS94eFwY.roa (hash: Ecj0xnHDR2ooGxeY4fWUT554GHurKxl+Q6h8BrSfnec=) 2: wGWeHdFAebUh2SsfUsvE_TI-GNM.crl (hash: /xDIR9jDP8S7mDwksHrksuNknw/J1nif1lm3GMH/MjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:42:51:ec:75:66:8c:c6:29:b1:a0:62:d6:ac:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3 Validity Not Before: Dec 24 17:00:41 2025 GMT Not After : Dec 25 17:00:41 2025 GMT Subject: CN=fbd02725fc0f9309a4b6a5681bfcf957da5d7ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:19:22:34:2f:d3:bf:18:50:4f:fb:d2:99:b7: 67:90:4c:e6:b7:e9:70:9e:9e:25:3e:80:7a:f0:ac: d4:14:4e:2c:60:41:51:92:41:7f:d8:af:25:a5:46: ae:7f:9c:b0:b9:5c:7f:75:16:e8:10:96:44:76:5e: e6:be:a3:fa:a0:31:70:44:81:b8:f5:31:d3:00:1b: f7:3a:32:71:85:79:8a:d8:30:7d:f6:8a:7d:ca:41: 3b:4a:fa:b8:44:66:37:b0:41:52:05:45:a2:0d:b9: c8:fd:c6:ff:b9:5e:74:53:8d:48:2b:2b:47:38:e1: 29:5a:cd:7b:f4:a4:c8:43:8a:dd:b0:b3:e4:f0:d6: 6d:64:5f:06:71:30:99:8b:d4:e4:58:47:27:07:4c: 36:b8:dd:f5:35:61:bc:50:6f:d4:2c:f8:f7:1b:5a: f4:95:ab:44:05:29:d6:ca:a8:e4:17:5a:b9:8a:14: 4d:d2:c4:c5:74:6b:b2:33:82:ba:97:5b:08:40:db: 27:9c:b7:05:b6:5b:c4:72:b5:6f:52:5a:15:db:37: dd:01:37:6d:02:fe:40:0a:d9:4a:80:cf:08:fc:10: ac:f3:26:72:03:25:8d:1b:13:1a:b6:73:d8:a2:80: d9:54:73:70:b0:21:89:9d:38:cf:ff:ac:48:50:8d: 22:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D0:27:25:FC:0F:93:09:A4:B6:A5:68:1B:FC:F9:57:DA:5D:7E:F5 X509v3 Authority Key Identifier: keyid:C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:08:fa:b5:b2:67:c8:e0:1c:48:2a:da:61:e7:cf:09:24:1f: 49:f3:ab:83:21:d3:00:10:10:fb:b5:72:78:8e:66:02:62:98: 9c:45:a9:c4:70:77:34:f0:b4:81:a4:c7:16:97:40:25:cf:1b: 5d:85:a5:a3:91:da:c6:24:d0:bc:f1:4d:fc:bf:de:4e:93:bc: 15:f2:fa:70:30:52:61:c6:e3:aa:a7:cd:8c:ef:b8:8c:aa:7a: 38:62:cf:9f:75:4f:50:be:bc:f7:22:30:c0:ef:ce:3e:84:d3: a9:9e:56:e6:9c:57:8d:1c:18:9f:76:84:33:26:d3:8c:89:fc: 48:b8:86:92:a4:dd:cd:4c:1d:9f:66:cc:48:29:84:6a:86:ec: 65:75:74:c2:38:80:1e:70:53:33:ad:74:e6:c4:18:08:f5:49: 4c:73:7e:94:fc:e0:fd:0d:dc:18:6e:74:4b:06:b7:00:89:1a: 70:20:47:14:e6:06:4a:f3:55:c9:5c:f5:b7:c6:2b:50:36:18: 10:54:2a:cf:4f:09:fb:92:da:ae:91:bc:3d:e9:66:4d:7e:5a: e1:aa:01:a6:2f:3d:95:cb:33:b0:11:8c:2c:d3:a1:60:91:d8: b6:e0:2e:ea:1e:16:c4:69:ae:19:a1:9c:1d:df:33:e9:e4:2d: d8:9b:5a:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTkJR7HVmjMYpsaBi1qxVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNjU5ZTFkZDE0MDc5YjUyMWQ5MmIxZjUyY2JjNGZkMzIz ZTE4ZDMwHhcNMjUxMjI0MTcwMDQxWhcNMjUxMjI1MTcwMDQxWjAzMTEwLwYDVQQD EyhmYmQwMjcyNWZjMGY5MzA5YTRiNmE1NjgxYmZjZjk1N2RhNWQ3ZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRkiNC/TvxhQT/vSmbdnkEzmt+lw np4lPoB68KzUFE4sYEFRkkF/2K8lpUauf5ywuVx/dRboEJZEdl7mvqP6oDFwRIG4 9THTABv3OjJxhXmK2DB99op9ykE7Svq4RGY3sEFSBUWiDbnI/cb/uV50U41IKytH OOEpWs179KTIQ4rdsLPk8NZtZF8GcTCZi9TkWEcnB0w2uN31NWG8UG/ULPj3G1r0 latEBSnWyqjkF1q5ihRN0sTFdGuyM4K6l1sIQNsnnLcFtlvEcrVvUloV2zfdATdt Av5ACtlKgM8I/BCs8yZyAyWNGxMatnPYooDZVHNwsCGJnTjP/6xIUI0imwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvQJyX8D5MJpLalaBv8+VfaXX71MB8GA1UdIwQY MBaAFMBlnh3RQHm1IdkrH1LLxP0yPhjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0dXZUhkRkFlYlVoMlNzZlVzdkVfVEktR05NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84YjIwNDAtOGQzZi00MTRiLThkZTgt MTQ2NGI0ZjkxNjcyLzEvd0dXZUhkRkFlYlVoMlNzZlVzdkVfVEktR05NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84YjIwNDAtOGQzZi00MTRiLThkZTgtMTQ2NGI0ZjkxNjcy LzEvd0dXZUhkRkFlYlVoMlNzZlVzdkVfVEktR05NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAj6tbJn yOAcSCraYefPCSQfSfOrgyHTABAQ+7VyeI5mAmKYnEWpxHB3NPC0gaTHFpdAJc8b XYWlo5HaxiTQvPFN/L/eTpO8FfL6cDBSYcbjqqfNjO+4jKp6OGLPn3VPUL689yIw wO/OPoTTqZ5W5pxXjRwYn3aEMybTjIn8SLiGkqTdzUwdn2bMSCmEaobsZXV0wjiA HnBTM6105sQYCPVJTHN+lPzg/Q3cGG50Swa3AIkacCBHFOYGSvNVyVz1t8YrUDYY EFQqz08J+5LarpG8PelmTX5a4aoBpi89lcszsBGMLNOhYJHYtuAu6h4WxGmuGaGc Hd8z6eQt2JtaHw== -----END CERTIFICATE-----Generated at Wed Dec 24 18:27:04 2025 by rpki-client